AZL-40685 CVE-2024-32605 affecting package hdf5 for versions less than 1.14.4-1

🗓️ 14 May 2024 15:36:45Reported by GoogleType

osv🔗 osv.dev👁 5 Views

AZL-40685 CVE-2024-32605 affects hdf5 before 1.14.4-1; heap over-read in H5VM_memcpyvv via H5D__compact_readvv.

Reporter	Title	Published	Views	Family All 37
Tenable Nessus	Azure Linux 3.0 Security Update: hdf5 (CVE-2024-32605)	10 Feb 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: hdf5 (CVE-2024-32605)	3 Jul 202400:00	–	nessus
Tenable Nessus	RHEL 9 : RHEL AI 1.5 hdf5 (RHSA-2025:3801)	13 Apr 202500:00	–	nessus
Tenable Nessus	TencentOS Server 4: hdf5 (TSSA-2024:0175)	16 Jun 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2024-32605	5 Mar 202500:00	–	nessus
BDU FSTEC	The vulnerability of the H5VM_memcpyvv() function in the H5VM.c file of the HDF5 library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	17 Sep 202400:00	–	bdu_fstec
CBLMariner	CVE-2024-32605 affecting package hdf5 for versions less than 1.14.4.3-1	21 Jun 202409:32	–	cbl_mariner
CBLMariner	CVE-2024-32605 affecting package hdf5 for versions less than 1.14.4-1	23 May 202423:29	–	cbl_mariner
CNNVD	HDF Group HDF5 安全漏洞	10 May 202400:00	–	cnnvd
CVE	CVE-2024-32605	9 May 202416:27	–	cve

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-32605

21 Apr 2026 04:29Current

7.2High risk

Vulners AI Score7.2

CVSS 3.18.8

EPSS0.00944

SSVC